PT-2026-2532 · Linux+3 · Linux Kernel+3
Published
2025-12-02
·
Updated
2026-06-16
·
CVE-2025-68800
CVSS v2.0
6.4
Medium
| Vector | AV:L/AC:L/Au:S/C:C/I:P/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.18.0-rc1-custom-g1a3d6d7cd014
Description
The Linux kernel contained a use-after-free issue within the mlxsw spectrum mr module. A missing mutex acquisition during multicast route deletion could lead to this condition when updating multicast route statistics. The issue was identified through KASAN (Kernel Address Sanitizer) detecting a slab-use-after-free in the
mlxsw sp mr stats update function. The root cause was a race condition where a list entry could be deleted while being traversed for statistics updates.Recommendations
Update to version 6.18.0-rc1-custom-g1a3d6d7cd014 or a later version to address this issue.
Exploit
Fix
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linuxmint
Linux Kernel
Rocky Linux
Ubuntu